JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.95.216.147

Activity Trending Down

Abuse Confidence Score

61% Elevated

39 reports

32 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 147.216.95.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 32 distinct reporters

First reported

October 1st 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 12 🇳🇱 Netherlands 7 🇺🇸 United States of America 6

Most common categories Web App Attack 26 Bad Web Bot 17 Brute-Force 15 Hacking 5 DDoS Attack 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-02 21:59:52 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-01.	Web App Attack SSH Hacking
🇩🇪 Gwyneth Llewelyn	2026-10-02 05:22:55 (1 month ago)	2026/10/02 06:22:28 [error] 2513#2513: 142373 access forbidden by rule, client: 34.95.216.147, server: lisbon-pre-1755-earthquake.org, request: "GET /uploads../.env HTTP/2.0", host: "lisbon-pre-1755-earthquake.org" 2026/10/02 06:22:53 [error] 2513#2 ... show more 2026/10/02 06:22:28 [error] 2513#2513: 142373 access forbidden by rule, client: 34.95.216.147, server: lisbon-pre-1755-earthquake.org, request: "GET /uploads../.env HTTP/2.0", host: "lisbon-pre-1755-earthquake.org" 2026/10/02 06:22:53 [error] 2513#2513: 142373 access forbidden by rule, client: 34.95.216.147, server: lisbon-pre-1755-earthquake.org, request: "GET /files../.env HTTP/2.0", host: "lisbon-pre-1755-earthquake.org", referrer: "http://lisbon-pre-1755-earthquake.org:8080/files../.env" 2026/10/02 06:22:53 [error] 2513#2513: 142373 access forbidden by rule, client: 34.95.216.147, server: lisbon-pre-1755-earthquake.org, request: "GET /media../.env HTTP/2.0", host: "lisbon-pre-1755-earthquake.org", referrer: "http://lisbon-pre-1755-earthquake.org:8080/media../.env" show less	Brute-Force Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-10-02 03:53:55 (1 month ago)	34.95.216.147 - - [02/Oct/2026:04:53:53 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"	Bad Web Bot
🇫🇷 mrcrassi	2026-10-02 03:22:26 (1 month ago)	Triggered Cloudflare WAF (firewallManaged) from BR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /service-worker.js UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) This repor ... show more Triggered Cloudflare WAF (firewallManaged) from BR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /service-worker.js UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 rubixstudios	2026-10-02 02:21:02 (1 month ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇧🇪 cmbplf	2026-10-02 02:05:11 (1 month ago)	3.181 requests from abuseipdb.com blacklisted IP (6mos4d15h)	Brute-Force Bad Web Bot
🇩🇪 BlueWire Hosting	2026-10-02 01:30:48 (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-10-02 01:29:52 (1 month ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 20:23:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.95.216.147 (147.216.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:23:51.337507 2026] [security2:error] [pid 13575:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.95.216.147 (147.216.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:23:51.337507 2026] [security2:error] [pid 13575:tid 13575] [client 34.95.216.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webfrog.ws"] [uri "/.env.staging"] [unique_id "ar7BV3DgmPOqdNT08vKTuQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-10-01 18:07:28 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇫🇮 as211431.net	2026-10-01 18:04:23 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from BR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /Dockerfile UA: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/) This report was generated by: https://github.com/sefi ... show more Triggered Cloudflare WAF (firewallCustom) from BR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /Dockerfile UA: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-10-01 17:00:42 (1 month ago)	34.95.216.147 - - [01/Oct/2026:18:00:40 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-10-01 16:03:47 (1 month ago)	2026/10/01 17:03:44 [error] 3532286#3532286: 1991074 access forbidden by rule, client: 34.95.216.147, server: [redacted], request: "GET /.//.env HTTP/2.0", host: "wiki.betatechnologies.info" 2026/10/01 17:03:44 [error] 3532286#3532286: 1991041 acce ... show more 2026/10/01 17:03:44 [error] 3532286#3532286: 1991074 access forbidden by rule, client: 34.95.216.147, server: [redacted], request: "GET /.//.env HTTP/2.0", host: "wiki.betatechnologies.info" 2026/10/01 17:03:44 [error] 3532286#3532286: 1991041 access forbidden by rule, client: 34.95.216.147, server: [redacted], request: "GET /static//home/user/.env HTTP/2.0", host: "wiki.betatechnologies.info" 2026/10/01 17:03:44 [error] 3532286#3532286: *1991041 access forbidden by rule, client: 34.95.216.147, server: [redacted], request: "GET /static//app/.env HTTP/2.0", host: "wiki.betatechnologies.info" show less	Brute-Force Web App Attack
🇪🇸 robotstxt	2026-10-01 15:29:24 (1 month ago)	34.95.216.147 - - [01/Oct/2026:15:28:44 +0000] "-" 400 193 "-" "-" "-" edge="34.95.216.147" 34.95.216.147 - - [01/Oct/2026:15:28:44 +0000] "GET /storage/logs/laravel.log HTTP/2.0" 400 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/ ... show more 34.95.216.147 - - [01/Oct/2026:15:28:44 +0000] "-" 400 193 "-" "-" "-" edge="34.95.216.147" 34.95.216.147 - - [01/Oct/2026:15:28:44 +0000] "GET /storage/logs/laravel.log HTTP/2.0" 400 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "-" edge="34.95.216.147" 34.95.216.147 - - [01/Oct/2026:15:28:44 +0000] "GET /wp-config.php.bak HTTP/2.0" 400 0 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" "-" edge="34.95.216.147" 34.95.216.147 - - [01/Oct/2026:15:28:45 +0000] "GET /config.php.bak HTTP/2.0" 400 0 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "-" edge="34.95.216.147" 34.95.216.147 - - [01/Oct/2026:15:28:45 +0000] "GET /wp-config.php~ HTTP/2.0" 400 0 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" edge="34.95.216.147" ... show less	Web Spam Web App Attack
🇩🇪 updown.io	2026-10-01 14:28:38 (1 month ago)	{"level":"info","ts":1790864905.260381,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.216.147","remote_port":"50600","client_ip":"34.95.216.147","proto":"HTTP/2.0","method":"GET","host":"status.gpltimes.com","ur ... show more {"level":"info","ts":1790864905.260381,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.216.147","remote_port":"50600","client_ip":"34.95.216.147","proto":"HTTP/2.0","method":"GET","host":"status.gpltimes.com","uri":"/static/manifest.json","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Priority":["u=0, i"],"Sec-Fetch-Site":["none"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.3 ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.30

🇨🇷 190.211.112.98

🇦🇷 190.174.208.7

🇻🇪 190.73.79.26

🇧🇷 189.89.80.39

🇸🇬 185.200.116.76

🇮🇩 172.232.232.179

🇩🇪 165.22.16.38

🇩🇪 151.243.11.192

🇨🇳 115.190.188.201

🇺🇸 91.230.168.160

🇻🇪 38.137.234.217

🇧🇪 35.210.53.157

🇨🇳 14.153.235.148

🇺🇸 2001:470:1:fb5::23e

🇹🇼 198.235.24.115

🇳🇱 193.47.62.111

🇬🇧 193.8.186.31

🇳🇱 192.142.15.34

🇲🇽 189.224.55.139